140
4.
fail-permit for a portal
Web server.
portal
[
ipv6
]
apply web-server
server-name
fail-permit
By default, portal fail-permit is
disabled for a portal Web server.
Configuring BAS-IP for portal packets sent to the
portal authentication server
If the device runs Portal 2.0, the unsolicited packets sent to the portal authentication server must
carry the BAS-IP attribute. If the device runs Portal 3.0, the unsolicited packets sent to the portal
authentication server must carry the BAS-IP or BAS-IPv6 attribute.
If IPv4 portal authentication is enabled on an interface, you can configure the BAS-IP attribute on the
interface. If IPv6 portal authentication is enabled on an interface, you can configure the BAS-IPv6
attribute on the interface.
After this attribute is configured, the source IP address for unsolicited notification portal packets the
device sends to the portal authentication server is the configured BAS-IP or BAS-IPv6 address. If the
attribute is not configured, the source IP address of the portal packets is the IP address of the packet
output interface.
During a re-DHCP portal authentication or mandatory user logout process, the device sends portal
notification packets to the portal authentication server. For the authentication or logout process to
complete, make sure the BAS-IP/BAS-IPv6 attribute is the same as the device IP or IPv6 address
specified on the portal authentication server.
To configure the BAS-IP attribute for portal packets sent to the portal authentication server on an
interface:
1. Enter system view.
system-view
N/A
2. Enter interface view.
interface
interface-type
interface-number
N/A
3. Configure BAS-IP for IPv4
portal packets sent to the
server.
portal
bas-ip
ipv4-address
By default:
• The BAS-
portal reply packet sent to the portal
authentication server is the source
IPv4 address of the packet.
• The BAS-
portal notification packet sent to the
portal authentication server is the
IPv4 address of the packet's output
interface.
4. Configure BAS-
IPv6 portal packets sent to
the portal authentication
server.
portal
bas-ipv6
ipv6-address
By default:
• The BAS-IPv6 attribute of an IPv6
portal reply packet sent to the portal
authentication server is the source
IPv6 address of the packet.
• The BAS-IPv6 attribute of an IPv6
portal notification packet sent to the
portal authentication server is the
IPv6 address of the packet's output
interface.
To Next Page
Loading...
Need help?
General